Shell account advice

[hercules23]

Hi,

When creating new users in Linux, the shell account defaults to /bin/bash

Is it OK (secure) to leave this ?

Or ......what is the most secure setting for the shell acount ?

Any advice will be appreciated !

Thanks

 

[xmb]

The shell is a lesser security problem, the major problems include outdated software/kernel and wrong access modes on important files done by the admin, or an old distro.

. Mac for productivity
.. Linux for developement
... Windows for solitaire

 

[lgarner]

It's not a setting, really. It's a selection of the shell. If the users need shell access, then they need something (bash, csh, whatever).

If not, then you can set it to /bin/false or /sbin/nologin.